Network & DNS Tools

Grade any domain A to F across DNS, email authentication, DNSSEC, blacklists and SSL in one shareable report.

Look up A, AAAA, MX, CNAME, TXT, NS and any DNS record from authoritative name servers.

Full DNS health report covering records, IPv4/IPv6 and common misconfigurations.

Find the PTR hostname for any IPv4 or IPv6 address, forward-confirmed.

Trace the delegation from the parent zone to the domain's own name servers, with glue and SOA checks.

See how a record resolves across public DNS servers worldwide after a change.

Validate the DNSSEC chain of trust: DS-to-key match, signature validity, and the exact reason a zone SERVFAILs.

Compare A, MX, NS and SPF/DMARC posture across many domains at once.

Check a host is online and measure TCP handshake time (IPv4 & IPv6).

Verify a time server is reachable, its stratum and clock offset.

Map every router on the path to a host, with the owner of each hop named.

Traceroute plus per-hop packet loss and jitter, so you see which hop actually drops traffic.

MX health: reachability, STARTTLS, PTR, SPF, DMARC and delivery posture.

Test any SMTP host: banner, EHLO capabilities and STARTTLS.

Catch the RFC 7208 ten DNS lookup limit that causes PermError: see which includes blew the budget and the exact fix.

Verify your email authentication records are set up to stop spoofing.

Check your mail server domain or IP against spam blacklists.

Check your domain against URI block lists used by spam filters.

Paste raw headers to diagnose delivery failures, hops and auth results.

Walk the SMTP accept path to a domain and see where mail is accepted or rejected. No message is sent.

Build a correct SPF or DMARC record to copy straight into your DNS.

Full-stack readout: DNS (IPv4 and IPv6), reachability, TLS certificate and HTTP response, with the exact failing layer named.

Validate your certificate, chain, protocols, revocation and expiry date.

Inspect the HTTP response headers returned over HTTP and HTTPS.

List every SSL certificate ever issued for a domain and its subdomains, with issuers and upcoming expiries.

Modern RDAP lookup for domain registration, status, dates and contacts.

Query traditional WHOIS servers for domain or IP registration data.

Registry (RDAP) owner, network, CIDR, country and reverse DNS for any IPv4 or IPv6 address.

Instantly see the public IPv4 or IPv6 address the internet uses for your connection.

Convert between Unicode and ASCII (xn--) domain forms to spot homograph look-alikes.

Layer-by-layer triage: DNS → reachability → TLS → HTTP response.

MX → SMTP → SPF/DKIM/DMARC → blacklists/URIBL → headers, in order.

Move providers with zero downtime: lookup → nameserver trace → propagation.

Launch-day security: SPF, DKIM, DMARC, DNSSEC and SSL done right.

Triangulate deliverability with blacklists, URIBL and raw headers together.